Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.8

AstrBot Project v3.5.22: Malicious Image URLs Can Steal Sensitive Files

CVE-2025-57697 · published 11 months ago
Summary

AstrBot Project v3.5.22 allows attackers to access any file on the system by sending a specially crafted image URL. This means that sensitive data, like passwords or private information, can be stolen. To fix this, update to the latest version of AstrBot Project.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
Ecosystem VendorProductAffected versions
pip – astrbot <= 3.5.22
– astrbot astrbot 3.5.22
cpe:2.3:a:astrbot:astrbot:3.5.22:*:*:*:*:*:*:*
Original advisory text
AstrBot has an arbitrary file read vulnerability in function _encode_image_bs64
AstrBot Project v3.5.22 has an arbitrary file read vulnerability in function _encode_image_bs64. Since the _encode_image_bs64 function defined in entities.py opens the image specified by the user in the request body and returns the image content as a base64-encoded string without checking the legitimacy of the image path, attackers can construct a series of malicious URLs to read any specified file, resulting in sensitive data leakage.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
7.8 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-22Path Traversal
CWE-125Out-of-bounds Read
Timeline
Published7 Nov 2025
Updated4 Nov 2026
First seen6 Mar 2026
Sources
GHSA-vm2f-46xc-5jc3 · GHSA
CVE-2025-57697 · NVD
PYSEC-2026-1197 · OSV
CVE-2025-57697 · OSV
Track software like this
Free during beta